Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323134363534.roa
File: 3139322e3230382e31342e302f32342d3234203d3e20323134363534.roa (raw, json)
Hash identifier: djg7K32BJ7MU01htqBzUVaoApYmRoKZ5AIfBZbFAJkE=
Subject key identifier: D1:27:B6:B7:87:56:D3:01:44:11:EE:6B:FF:6C:A4:70:05:FC:D1:56
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 6D1A41F2EF85A02091ED44D88F23EDA75BC12F24
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323134363534.roa
Signing time: Fri 29 Nov 2024 15:28:52 +0000
ROA not before: Fri 29 Nov 2024 15:23:52 +0000
ROA not after: Fri 28 Nov 2025 15:28:52 +0000
asID: 214654
IP address blocks: 192.208.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:1a:41:f2:ef:85:a0:20:91:ed:44:d8:8f:23:ed:a7:5b:c1:2f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 29 15:23:52 2024 GMT
Not After : Nov 28 15:28:52 2025 GMT
Subject: CN=D127B6B78756D3014411EE6BFF6CA47005FCD156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:b7:d7:fd:40:05:05:e5:74:56:08:8d:8c:
6e:03:ab:5a:50:6a:13:12:23:6c:c2:35:96:7c:6d:
a7:9d:5b:92:71:b5:5b:1a:62:c4:83:2b:b5:8f:ce:
7b:20:51:62:ca:5b:77:58:f1:da:db:22:e0:03:64:
ce:96:4e:86:1d:57:90:ce:a8:b4:0c:61:e2:df:72:
9d:fe:7a:8c:47:e0:15:25:28:fa:68:ff:83:e9:97:
7e:95:27:3f:b6:bc:64:79:23:20:4a:03:d5:74:a4:
54:25:42:69:aa:4d:ea:a6:8c:b5:40:3a:1b:7c:ea:
ea:63:f5:81:d3:0a:45:e9:5f:2d:d5:cd:66:65:bf:
4f:31:dc:6e:c3:14:a3:4f:45:be:3a:e4:42:3a:e4:
43:65:f0:25:35:1e:1b:b7:4e:d5:37:83:97:19:38:
73:1a:ec:51:b2:ed:3e:71:70:52:55:b5:7a:52:17:
6a:f9:ca:f5:08:14:3b:6c:b0:d6:b8:9a:dc:3f:fa:
33:e6:84:47:c8:65:1f:5d:30:bc:07:9d:23:9d:a1:
83:cb:85:e7:d1:fb:7f:84:59:5e:3c:8c:f6:10:9b:
11:5b:3d:f2:6a:8c:cf:30:95:1b:32:0e:b4:d1:7c:
4f:91:93:8d:88:ff:c3:97:6b:fe:9a:17:47:b6:a9:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:27:B6:B7:87:56:D3:01:44:11:EE:6B:FF:6C:A4:70:05:FC:D1:56
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323134363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.14.0/24
Signature Algorithm: sha256WithRSAEncryption
30:05:8d:72:03:7d:c2:3a:80:42:bd:7f:fc:56:b0:e7:d3:72:
8d:8f:86:ef:c2:85:6d:3d:40:c2:20:cc:d6:48:23:7a:fd:e8:
3b:e5:7d:ae:d3:7e:97:41:87:f3:21:01:fc:9c:02:98:57:41:
7d:37:bd:e5:3a:52:c1:ec:79:93:0b:0b:5c:29:86:b8:41:e1:
ab:a1:99:97:69:e1:09:da:af:85:cd:da:51:40:62:15:d5:82:
c0:eb:1c:15:0a:cf:df:a3:4a:4c:cd:ad:f5:60:2e:c9:46:8d:
58:11:7b:d4:de:f4:65:45:14:73:24:79:69:35:6b:b5:34:08:
9e:f9:b9:bb:66:78:42:b3:40:f7:ca:40:84:90:0b:26:be:ba:
fe:19:32:55:61:96:1e:da:2c:e3:b2:e1:b8:9a:3c:4b:31:f7:
6b:4b:a9:f6:46:7a:89:9c:ec:96:ac:f0:be:28:5b:66:04:0f:
b8:20:29:bd:dc:0f:9d:8f:78:b1:c7:81:33:fe:a7:81:d9:7f:
24:4c:6e:1c:4a:d4:b1:f4:44:42:72:58:af:e4:54:4b:19:fc:
f8:b0:91:db:f6:2b:e6:14:a2:21:9e:9f:a4:50:4c:34:7d:85:
fd:0d:bb:ec:32:02:1f:48:d9:9f:e3:aa:6d:ee:6e:b6:b4:1d:
29:29:98:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:17:52 2025 by rpki-client